@mnemonik/cursor-hooks 0.7.65 → 0.7.68

package/dist/lib/resultCue.js

@@ -0,0 +1,356 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { chmodSync, closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync, } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { sessionStateFilePath } from './sessionState.js';
+const RESULT_CUE_CHARS = 1_024;
+const RESULT_CUE_FILE_RE = /^result-cue-[a-f0-9]{64}\.json$/u;
+const MAX_RESULT_CUE_FILE_BYTES = 8 * 1_024;
+const READ_COMMAND_PREFIX = /^\s*(?:cat(?:\s|$)|head(?:\s|$)|sed\s+-n(?:\s|$)|grep(?:\s|$)|rg(?:\s|$))/u;
+export const RESULT_CUE_TTL_MS = 2 * 60 * 1_000;
+export const MAX_PENDING_RESULT_CUES = 16;
+function hash(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function hasDisallowedTextControl(text) {
+    for (let index = 0; index < text.length; index += 1) {
+        const code = text.charCodeAt(index);
+        const disallowedC0 = code < 0x20 && code !== 0x09 && code !== 0x0a && code !== 0x0d;
+        if (disallowedC0 || (code >= 0x7f && code <= 0x9f))
+            return true;
+    }
+    return false;
+}
+function isRecognizableBinaryText(text) {
+    const leading = text.trimStart();
+    const lower = leading.toLowerCase();
+    return (leading.startsWith('GIF87a') ||
+        leading.startsWith('GIF89a') ||
+        leading.startsWith('%PDF-') ||
+        /^(?:iVBORw0KGgo|\/9j\/|R0lGOD|UklGR[\s\S]{4}WEBP)/u.test(leading) ||
+        /^(?:<\?xml[\s\S]*?\?>\s*)?(?:(?:<!--[\s\S]*?-->|<!doctype\s+svg(?:\s[^>]*)?>)\s*)*<svg(?:\s|>)/iu.test(leading) ||
+        lower.startsWith('data:image') ||
+        lower.startsWith('data:application/octet-stream'));
+}
+/** Bound and validate text before it may become a server-side recall cue. */
+export function safeCursorResultText(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    if (value.trim().length === 0 ||
+        value.includes('\ufffd') ||
+        hasDisallowedTextControl(value) ||
+        isRecognizableBinaryText(value)) {
+        return undefined;
+    }
+    // The server's z.string().max(1024) counts UTF-16 code units, as does
+    // String#slice. Keep the client bound identical so astral text cannot turn a
+    // locally valid excerpt into a rejected request.
+    return value.slice(0, RESULT_CUE_CHARS);
+}
+function hasBinaryResultShape(value, depth = 0) {
+    if (!value || typeof value !== 'object' || depth > 3)
+        return false;
+    if (Array.isArray(value))
+        return value.some((item) => hasBinaryResultShape(item, depth + 1));
+    const record = value;
+    if (record.isImage === true)
+        return true;
+    const source = record.source;
+    const tags = [
+        record.type,
+        record.mimeType,
+        record.mime_type,
+        record.media_type,
+        record.content_type,
+        source && typeof source === 'object' ? source.type : undefined,
+        source && typeof source === 'object'
+            ? source.media_type
+            : undefined,
+    ];
+    if (tags.some((tag) => /^(?:image|audio|video|binary|application\/octet-stream)(?:\/|$)/iu.test(String(tag ?? '')))) {
+        return true;
+    }
+    return Object.values(record).some((item) => hasBinaryResultShape(item, depth + 1));
+}
+function textualCursorResult(value) {
+    if (typeof value === 'string')
+        return value;
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    if (hasBinaryResultShape(value))
+        return undefined;
+    const record = value;
+    for (const key of ['content', 'output', 'stdout', 'text', 'result']) {
+        if (typeof record[key] === 'string')
+            return record[key];
+    }
+    const file = record.file;
+    if (file && typeof file === 'object' && !Array.isArray(file)) {
+        const content = file.content;
+        if (typeof content === 'string')
+            return content;
+    }
+    if (Array.isArray(record.content)) {
+        const blocks = [];
+        for (const block of record.content) {
+            if (!block || typeof block !== 'object' || Array.isArray(block))
+                continue;
+            const typed = block;
+            if (typed.type === 'text' && typeof typed.text === 'string')
+                blocks.push(typed.text);
+        }
+        return blocks.length > 0 ? blocks.join('\n') : undefined;
+    }
+    return undefined;
+}
+export function isReadResultTool(toolName, toolInput) {
+    if (toolName === 'Read' || toolName === 'Grep')
+        return true;
+    if (toolName !== 'Shell')
+        return false;
+    const command = toolInput?.command;
+    return typeof command === 'string' && READ_COMMAND_PREFIX.test(command);
+}
+/** Extract direct textual content from Cursor's JSON-string PostToolUse result. */
+export function extractCursorResultExcerpt(input) {
+    if (!isReadResultTool(input.toolName, input.toolInput) || typeof input.toolOutput !== 'string') {
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(input.toolOutput);
+    }
+    catch {
+        return undefined;
+    }
+    const raw = textualCursorResult(parsed);
+    if (raw === undefined)
+        return undefined;
+    const text = input.toolName === 'Read' ? raw.replace(/^[ \t]*\d+→ ?/gmu, '') : raw;
+    return safeCursorResultText(text);
+}
+/** A newline may delimit provider/native ids; every segment remains printable. */
+export function validCursorToolUseId(value) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 255)
+        return undefined;
+    if (value.includes('\ufffd'))
+        return undefined;
+    const segments = value.split('\n');
+    if (segments.some((segment) => segment.length === 0 ||
+        // eslint-disable-next-line no-control-regex -- rejecting control bytes is the point
+        /[\u0000-\u0009\u000b-\u001f\u007f-\u009f]/u.test(segment))) {
+        return undefined;
+    }
+    return value;
+}
+function cuePath(sessionId, toolUseId) {
+    return sessionStateFilePath(sessionId, `result-cue-${hash(toolUseId)}.json`);
+}
+function ensurePrivateDirectory(filePath) {
+    const directory = dirname(filePath);
+    const root = dirname(directory);
+    try {
+        if (existsSync(root) && lstatSync(root).isSymbolicLink())
+            return false;
+        mkdirSync(root, { recursive: true, mode: 0o700 });
+        chmodSync(root, 0o700);
+        if (existsSync(directory) && lstatSync(directory).isSymbolicLink())
+            return false;
+        if (!existsSync(directory))
+            mkdirSync(directory, { mode: 0o700 });
+        chmodSync(directory, 0o700);
+        return lstatSync(directory).isDirectory() && !lstatSync(directory).isSymbolicLink();
+    }
+    catch {
+        return false;
+    }
+}
+function readCue(filePath) {
+    try {
+        const state = lstatSync(filePath);
+        if (!state.isFile() || state.isSymbolicLink() || state.size > MAX_RESULT_CUE_FILE_BYTES) {
+            return undefined;
+        }
+        const value = JSON.parse(readFileSync(filePath, 'utf8'));
+        if (value.version !== 1 ||
+            typeof value.targetKey !== 'string' ||
+            typeof value.createdAt !== 'number' ||
+            typeof value.expiresAt !== 'number' ||
+            !Number.isFinite(value.createdAt) ||
+            !Number.isFinite(value.expiresAt) ||
+            !/^[a-f0-9]{64}$/u.test(value.targetKey) ||
+            (value.excerpt !== undefined && typeof value.excerpt !== 'string')) {
+            return undefined;
+        }
+        if (value.excerpt !== undefined && safeCursorResultText(value.excerpt) !== value.excerpt) {
+            return undefined;
+        }
+        return value;
+    }
+    catch {
+        return undefined;
+    }
+}
+function writeCue(filePath, value) {
+    if (!ensurePrivateDirectory(filePath))
+        return false;
+    const directory = dirname(filePath);
+    const temporary = join(directory, `.result-cue-${process.pid}-${randomUUID()}.tmp`);
+    let descriptor;
+    try {
+        if (existsSync(filePath) && lstatSync(filePath).isSymbolicLink())
+            return false;
+        descriptor = openSync(temporary, 'wx', 0o600);
+        writeFileSync(descriptor, JSON.stringify(value), 'utf8');
+        closeSync(descriptor);
+        descriptor = undefined;
+        chmodSync(temporary, 0o600);
+        renameSync(temporary, filePath);
+        return true;
+    }
+    catch {
+        if (descriptor !== undefined) {
+            try {
+                closeSync(descriptor);
+            }
+            catch {
+                // Best effort only.
+            }
+        }
+        rmSync(temporary, { force: true });
+        return false;
+    }
+}
+function cueFiles(sessionId) {
+    const directory = dirname(sessionStateFilePath(sessionId, 'state.json'));
+    try {
+        if (!existsSync(directory))
+            return [];
+        const state = lstatSync(directory);
+        if (!state.isDirectory() || state.isSymbolicLink())
+            return [];
+        return readdirSync(directory)
+            .filter((name) => RESULT_CUE_FILE_RE.test(name))
+            .map((name) => join(directory, name));
+    }
+    catch {
+        return [];
+    }
+}
+function removeExpiredAndBound(sessionId, now) {
+    const retained = cueFiles(sessionId)
+        .map((filePath) => ({ filePath, cue: readCue(filePath) }))
+        .filter((entry) => {
+        if (!entry.cue || entry.cue.expiresAt <= now) {
+            rmSync(entry.filePath, { force: true });
+            return false;
+        }
+        return true;
+    })
+        .sort((left, right) => (left.cue?.createdAt ?? 0) - (right.cue?.createdAt ?? 0));
+    while (retained.length >= MAX_PENDING_RESULT_CUES) {
+        const oldest = retained.shift();
+        if (oldest)
+            rmSync(oldest.filePath, { force: true });
+    }
+}
+export function rememberPendingResultCue(input) {
+    const toolUseId = validCursorToolUseId(input.toolUseId);
+    if (!input.sessionId || !toolUseId || !input.target)
+        return false;
+    const now = input.now ?? Date.now();
+    const filePath = cuePath(input.sessionId, toolUseId);
+    removeExpiredAndBound(input.sessionId, now);
+    return writeCue(filePath, {
+        version: 1,
+        targetKey: hash(input.target),
+        createdAt: now,
+        expiresAt: now + RESULT_CUE_TTL_MS,
+    });
+}
+export function attachPendingResultCue(input) {
+    if (!input.sessionId || !input.target)
+        return false;
+    const excerpt = safeCursorResultText(input.excerpt);
+    if (!excerpt)
+        return false;
+    const now = input.now ?? Date.now();
+    const targetKey = hash(input.target);
+    const candidates = cueFiles(input.sessionId)
+        .map((filePath) => ({ filePath, cue: readCue(filePath) }))
+        .filter((entry) => !!entry.cue &&
+        entry.cue.expiresAt > now &&
+        entry.cue.targetKey === targetKey &&
+        entry.cue.excerpt === undefined)
+        .sort((left, right) => right.cue.createdAt - left.cue.createdAt);
+    const matched = candidates[0];
+    if (!matched) {
+        // Dedicated BeforeReadFile/AfterShellExecution payloads do not carry the
+        // generic tool_use_id. Keep one target-keyed fallback so the later generic
+        // PostToolUse can bind it to its validated native action id. The key and
+        // filename are still hashes; no path or command becomes a path segment.
+        removeExpiredAndBound(input.sessionId, now);
+        return writeCue(cuePath(input.sessionId, `target:${targetKey}`), {
+            version: 1,
+            targetKey,
+            excerpt,
+            createdAt: now,
+            expiresAt: now + RESULT_CUE_TTL_MS,
+        });
+    }
+    return writeCue(matched.filePath, { ...matched.cue, excerpt });
+}
+export function takePendingResultCue(input) {
+    const toolUseId = validCursorToolUseId(input.toolUseId);
+    if (!input.sessionId || !toolUseId || !input.target)
+        return undefined;
+    const filePath = cuePath(input.sessionId, toolUseId);
+    const cue = readCue(filePath);
+    const now = input.now ?? Date.now();
+    if (!cue) {
+        const targetKey = hash(input.target);
+        const fallback = cueFiles(input.sessionId)
+            .map((candidatePath) => ({ candidatePath, cue: readCue(candidatePath) }))
+            .filter((entry) => !!entry.cue &&
+            entry.cue.expiresAt > now &&
+            entry.cue.targetKey === targetKey &&
+            entry.cue.excerpt !== undefined)
+            .sort((left, right) => right.cue.createdAt - left.cue.createdAt)[0];
+        if (!fallback)
+            return undefined;
+        rmSync(fallback.candidatePath, { force: true });
+        if (fallback.cue.excerpt === undefined)
+            return undefined;
+        return { excerpt: fallback.cue.excerpt };
+    }
+    if (cue.expiresAt <= now) {
+        rmSync(filePath, { force: true });
+        return undefined;
+    }
+    if (cue.targetKey !== hash(input.target))
+        return undefined;
+    rmSync(filePath, { force: true });
+    return cue.excerpt === undefined ? undefined : { excerpt: cue.excerpt };
+}
+export function discardPendingResultCue(input) {
+    if (!input.sessionId)
+        return false;
+    const toolUseId = validCursorToolUseId(input.toolUseId);
+    let removed = false;
+    if (toolUseId) {
+        const filePath = cuePath(input.sessionId, toolUseId);
+        const existed = existsSync(filePath);
+        rmSync(filePath, { force: true });
+        removed = existed;
+    }
+    if (!input.target)
+        return removed;
+    const targetKey = hash(input.target);
+    for (const filePath of cueFiles(input.sessionId)) {
+        if (readCue(filePath)?.targetKey !== targetKey)
+            continue;
+        rmSync(filePath, { force: true });
+        removed = true;
+    }
+    return removed;
+}
+//# sourceMappingURL=resultCue.js.map

package/dist/lib/resultCue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultCue.js","sourceRoot":"","sources":["../../src/lib/resultCue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAC9D,MAAM,yBAAyB,GAAG,CAAC,GAAG,KAAK,CAAC;AAC5C,MAAM,mBAAmB,GACvB,4EAA4E,CAAC;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAChD,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAuB1C,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;QACpF,IAAI,YAAY,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,CACL,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC;QAClE,kGAAkG,CAAC,IAAI,CACrG,OAAO,CACR;QACD,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;QAC9B,KAAK,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IACE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,wBAAwB,CAAC,KAAK,CAAC;QAC/B,wBAAwB,CAAC,KAAK,CAAC,EAC/B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,sEAAsE;IACtE,6EAA6E;IAC7E,iDAAiD;IACjD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,IAAI,GAAG;QACX,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,YAAY;QACnB,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC3F,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAClC,CAAC,CAAE,MAAkC,CAAC,UAAU;YAChD,CAAC,CAAC,SAAS;KACd,CAAC;IACF,IACE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAChB,mEAAmE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAC5F,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,IAAI,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC7E,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAI,IAAgC,CAAC,OAAO,CAAC;QAC1D,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC1E,MAAM,KAAK,GAAG,KAAgC,CAAC;YAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,SAAmC;IACpF,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,CAAC;IACnC,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,KAI1C;IACC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnF,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5F,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,oFAAoF;QACpF,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7D,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,SAAiB;IACnD,OAAO,oBAAoB,CAAC,SAAS,EAAE,cAAc,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,KAAK,CAAC;QACvE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;YACxF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA8B,CAAC;QACtF,IACE,KAAK,CAAC,OAAO,KAAK,CAAC;YACnB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YACjC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACxC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,EAClE,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YACzF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAyB,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,KAAuB;IACzD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IACpF,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/E,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC;QACvB,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,SAAS,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9D,OAAO,WAAW,CAAC,SAAS,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC/C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,GAAW;IAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;SACjC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;IACnF,OAAO,QAAQ,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAkB;IACzD,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrD,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,QAAQ,EAAE;QACxB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,iBAAiB;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAsC;IAC3E,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;SACzC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;SACzD,MAAM,CACL,CAAC,KAAK,EAAwD,EAAE,CAC9D,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG;QACzB,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;QACjC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAClC;SACA,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,SAAS,EAAE,CAAC,EAAE;YAC/D,OAAO,EAAE,CAAC;YACV,SAAS;YACT,OAAO;YACP,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,iBAAiB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAkB;IACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;aACvC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;aACxE,MAAM,CACL,CAAC,KAAK,EAA6D,EAAE,CACnE,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG;YACzB,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;YACjC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAClC;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;QACzB,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,KAAK,SAAS;YAAE,SAAS;QACzD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/sessionState.d.ts

@@ -15,6 +15,12 @@
 export declare const STALE_SESSION_MS: number;
 /** A named file inside this session's private directory. */
 export declare function sessionStateFilePath(sessionId: string, fileName: string): string;
+/**
+ * Remove exactly one hashed session directory without following links.
+ * SessionEnd cleanup is best effort: a hostile or malformed state path must
+ * never block the host from closing the session.
+ */
+export declare function removeSessionState(sessionId: string): boolean;
 /**
  * Remove abandoned session directories. Runs once per SessionStart and checks
  * the directory plus each direct child before deletion. Never follows links.

package/dist/lib/sessionState.js

@@ -12,7 +12,7 @@
  * short-TTL per-event dedup markers and is not per-session state.
  */
 import { createHash } from 'node:crypto';
-import { existsSync, lstatSync, readdirSync, rmSync } from 'node:fs';
+import { existsSync, lstatSync, readdirSync, rmSync, unlinkSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 /** Sessions older than this are abandoned; Cursor fires no reliable end event. */
@@ -25,6 +25,34 @@ function privateRoot() {
 export function sessionStateFilePath(sessionId, fileName) {
     return join(privateRoot(), createHash('sha256').update(sessionId).digest('hex'), fileName);
 }
+/**
+ * Remove exactly one hashed session directory without following links.
+ * SessionEnd cleanup is best effort: a hostile or malformed state path must
+ * never block the host from closing the session.
+ */
+export function removeSessionState(sessionId) {
+    if (!sessionId)
+        return false;
+    const root = privateRoot();
+    const directory = join(root, createHash('sha256').update(sessionId).digest('hex'));
+    try {
+        if (!existsSync(root) || lstatSync(root).isSymbolicLink() || !existsSync(directory)) {
+            return false;
+        }
+        const state = lstatSync(directory);
+        if (state.isSymbolicLink()) {
+            unlinkSync(directory);
+            return true;
+        }
+        if (!state.isDirectory())
+            return false;
+        rmSync(directory, { recursive: true, force: true });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Remove abandoned session directories. Runs once per SessionStart and checks
  * the directory plus each direct child before deletion. Never follows links.

package/dist/lib/sessionState.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionState.js","sourceRoot":"","sources":["../../src/lib/sessionState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,QAAgB;IACtE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC5D,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,CAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE;oBAAE,SAAS;gBACvD,IAAI,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC;gBAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,GAAG,GAAG,aAAa,GAAG,gBAAgB;oBAAE,SAAS;gBACrD,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"sessionState.js","sourceRoot":"","sources":["../../src/lib/sessionState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,GAAG,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,QAAgB;IACtE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,UAAU,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC5D,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,CAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE;oBAAE,SAAS;gBACvD,IAAI,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC;gBAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,GAAG,GAAG,aAAa,GAAG,gBAAgB;oBAAE,SAAS;gBACrD,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/types.d.ts

@@ -1,8 +1,9 @@
-export type CursorHookEvent = 'sessionStart' | 'beforeSubmitPrompt' | 'preToolUse' | 'postToolUse' | 'beforeShellExecution' | 'beforeMCPExecution' | 'afterMCPExecution' | 'afterFileEdit' | 'stop' | 'subagentStart' | 'subagentStop' | 'preCompact';
+export type CursorHookEvent = 'sessionStart' | 'sessionEnd' | 'beforeSubmitPrompt' | 'preToolUse' | 'postToolUse' | 'postToolUseFailure' | 'beforeShellExecution' | 'afterShellExecution' | 'beforeMCPExecution' | 'afterMCPExecution' | 'beforeReadFile' | 'afterFileEdit' | 'stop' | 'subagentStart' | 'subagentStop' | 'preCompact';
 /**
- * Stdin payload Cursor delivers to a hook. Per cursor.com/docs/hooks (verified
- * 2026-05-12). Common fields appear on every event; per-event fields are
- * union-typed and accessed by the dispatcher branch that recognises them.
+ * Stdin payload Cursor delivers to a hook. Captured from Cursor CLI
+ * 2026.09.02-c22c1a3 on 2026-09-03. Common fields appear on every event;
+ * per-event fields are union-typed and accessed by the dispatcher branch that
+ * recognises them.
  */
 export interface CursorHookInput {
     session_id?: string;
@@ -22,12 +23,20 @@ export interface CursorHookInput {
     messages_to_compact?: number;
     is_first_compaction?: boolean;
     tool_name?: string;
-    tool_input?: Record<string, unknown>;
-    tool_output?: unknown;
+    tool_use_id?: string;
+    tool_input?: string | Record<string, unknown>;
+    tool_output?: string;
     command?: string;
+    output?: string;
+    content?: string;
+    attachments?: unknown[];
     mcp_tool?: string;
     mcp_args?: Record<string, unknown>;
     mcp_result?: unknown;
+    result_json?: string;
+    mcp_server_name?: string;
+    mcp_server_url?: string;
+    url?: string;
     file_path?: string;
     followup_count?: number;
     /** Stop-loop counter Cursor actually sends (docs say followup_count; real payloads carry loop_count). */
@@ -42,6 +51,16 @@ export interface CursorHookInput {
     git_branch?: string;
     status?: string;
     duration_ms?: number;
+    duration?: number;
+    context_tokens?: number;
+    context_window_size?: number;
+    message_count?: number;
+    trigger?: string;
+    reason?: string;
+    final_status?: string;
+    error_message?: string;
+    failure_type?: string;
+    is_interrupt?: boolean;
 }
 /**
  * Cursor accepts a small family of output shapes depending on the event.
@@ -137,9 +156,8 @@ export interface McpPrecheckResponse {
  * docs/development/cursor-channel-probe.md): `agent_message` on the gate
  * hooks (`preToolUse`, `beforeShellExecution`, `beforeMCPExecution`);
  * `additional_context` on `beforeSubmitPrompt` (undocumented by Cursor, the
- * only per-prompt channel) and on `postToolUse` (fixed in 3.9.16 — an
- * earlier Cursor bug made this a no-op; `sessionStart`'s `additional_context`
- * remains bugged/not model-visible); `followup_message` on `stop`
+ * compatibility per-prompt channel) and on `sessionStart` / `postToolUse`
+ * (current CLI 2026.09.02); `followup_message` on `stop`
  * (auto-submitted as the next user message); and a synchronous `deny` on the
  * gate hooks. On deny/ask, Cursor forwards `user_message` to the model and
  * drops `agent_message` — the reverse of Cursor's own docs — so
@@ -157,9 +175,8 @@ export interface InjectionsResponse {
     confirmedJitDeliveryRefs?: string[];
     discardedJitDeliveryRefs?: string[];
     /**
-     * Server-selected rendering channel (Cursor only). 'agent_message' —
-     * render injections through the gate hooks' model-facing agent_message
-     * field (verified channel; additional_context is bugged in Cursor).
+     * Server-selected rendering channel (Cursor only). 'agent_message' renders
+     * injections through gate-hook agent_message fields for compatibility modes.
      * Absent or 'legacy' — historical rendering. Controlled server-side by
      * MNEMONIK_CURSOR_INJECTION_CHANNEL so a rollback needs no republish.
      */
@@ -167,8 +184,8 @@ export interface InjectionsResponse {
     /**
      * Files the server asks the hook to write to the workspace, idempotently
      * (skip-if-unchanged). Currently only the Cursor memory-tools rule file on
-     * SessionStart. Independent of `injections` — present even when `injections`
-     * is empty, which is the common Cursor case.
+     * SessionStart and UserPromptSubmit. Independent of `injections` — present
+     * even when `injections` is empty.
      */
     filesToWrite?: Array<{
         path: string;

package/dist/lib/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AAyOA,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":"AA8PA,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemonik/cursor-hooks",
-  "version": "0.7.65",
+  "version": "0.7.68",
   "description": "Cursor IDE hooks for Mnemonik memory awareness and host-side grounding gates. Hooks only: does not install skills, rules, AGENTS.md, .mnemonik.json, or MCP config.",
   "repository": {
     "type": "git",
@@ -33,7 +33,7 @@
   ],
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@mnemonik/shared": "7.78.1"
+    "@mnemonik/shared": "7.80.0"
   },
   "devDependencies": {
     "@types/node": "^20.19.43",